Storyflick Privacy Policy (Full Version, Compliant for Launch)
Last Updated: December 24, 2025
This Privacy Policy applies to all Storyflick services, including the Storyflick application, website, software and related services (hereinafter collectively referred to as \"Storyflick\" or the \"Platform\"). Storyflick is provided by KIMO CULTURE CO., LIMITED, a company incorporated and operating under the laws of Hong Kong, with its registered address at UNIT 18, 8/F, PETER LEUNG INDUSTRIAL BUILDING, 103 WAI YIP STREET, KWUN TONG, KOWLOON, HONG KONG (hereinafter referred to as \"we\", \"us\" or \"our\").
We fully recognize the importance of your personal privacy and are committed to protecting and respecting your privacy rights. This Privacy Policy explains how we collect, use, share, process and store your personal information in connection with our services, and sets forth your rights and options regarding the access, correction and use of your personal data. This Privacy Policy applies globally, and the terms specific to individual jurisdictions are set out in the \"Supplemental Terms – Jurisdiction-Specific Provisions\" section.
This Privacy Policy only governs data collection and processing activities conducted on our website and application. It does not apply to any data practices of third-party websites, applications or service providers. When you interact with such third-party platforms, you may disclose your personal information to them, and such third parties may adopt privacy policies and practices different from ours. We recommend that you carefully review the privacy policy of each third party to understand how they process your personal information.
If you do not agree with this Privacy Policy, please do not use the Storyflick services.
This Privacy Policy is important. We encourage you to read it carefully before using our Platform.
This Privacy Policy covers the following topics:
1. Information We Collect 2. How We Use Your Information 3. How We Share Your Information 4. How We Store and Protect Your Information 5. Your Rights and Choices 6. Processing of Minors’ Information 7. International Data Transfers 8. Updates to This Privacy Policy 9. How to Contact Us 10. Language 11. Governing Law and Dispute Resolution 12. Supplemental Terms – Jurisdiction-Specific Provisions
We may collect the following categories of information about you:
Information provided when contacting us. When you contact our customer support, you may need to provide your [contact information (email address) and relevant text, images or videos related to your inquiry]. We may collect your user ID and problem description to resolve your issues efficiently. We also collect information contained in your correspondence with us, including feedback, complaints and service requests.
Account registration and login information. If you choose to register or log in to Storyflick via mobile phone numbers in supported regions, we may collect your mobile phone number and relevant verification information for account registration, identity authentication, login verification, account security maintenance and compliance with applicable laws and regulations.
Clipboard access. Our application accesses text content from your device clipboard only in limited scenarios, such as content in specific formats (e.g., referral codes or promotional links), solely for advertising attribution analysis. We do not access or collect images, videos or other irrelevant clipboard content. Clipboard access is subject to your device’s operating system (iOS or Android) permissions, and you may manage or revoke such access at any time via your device settings.
We automatically collect information when you access and use Storyflick:
Usage information. We collect data regarding your interactions with Storyflick, including [your clicks, follows, search records, content saved to \"My List\", browsing history and transaction records]. Such data is used to analyze your preferences and infer your interests to deliver personalized content recommendations. We may also collect your check-in history, follow records, push notification activation records and service usage duration to calculate rewards obtained during incentive activities. Relevant transaction, consumption and reward records may be displayed on the product page.
Device information. We may collect information about the devices you use to access our services, including device IDs or other unique identifiers; device and software specifications and configurations; system language; referral URLs; IP addresses; browser information and standard web server log data; and advertising identifiers (IDFA for iOS devices only). This information is used to identify devices, ensure service security and optimize your user experience.
Advertising-related information. We may access the list of applications installed on your device only with your explicit consent to provide tailored advertising services.
Cookies and similar technologies. Cookies are small text files stored on your device that collect standard internet log information and visitor behavior data. We may use Cookies or similar tracking technologies to automatically collect user data, aiming to enhance user experience, optimize content recommendations, deliver advertisements and measure advertising performance. We and our partners may use Cookies to promote our Platform on third-party channels. We will obtain your prior consent before using Cookies where required by applicable laws.
Third-party account information. You may register and log in to Storyflick through third-party social networking accounts ([ ] or [ ]) and [ ] accounts. If you log in via a third-party account, we will obtain your account information from the third-party platform, including [nickname, [ ] ID (iOS only), avatar and email address], to create and log in to your Storyflick account, provide corresponding services, protect account security and prevent potential risks.
We may collect information from public channels, including government-released data and public information published on social media platforms.
We may also obtain your information from third parties, including scenarios where you are mentioned or included in direct messages, complaints, appeals, service requests, feedback submitted to us, or when your contact information is provided to us by others.
We use your collected information for the following legitimate purposes:
- Perform and fulfill our service agreements with you; - Provide, operate and maintain our services; - Create and manage your account and personal profile.
We use your information to communicate with you regarding service usage, product announcements, software updates and responses to your support requests.
- We may send you marketing materials and promotional offers via email. You may opt out of such marketing communications at any time during or after account registration by contacting us through the designated channels; - Deliver advertisements (including targeted advertising) on the Platform; - Measure the effectiveness of advertisements and promotional activities; - Facilitate in-platform transactions and purchases.
- Personalize the content displayed to you based on your preferences and interests; - Optimize the display mode of our content to ensure the most effective presentation on your device.
- Detect and prevent abusive behaviors, fraud, spam, malicious activities and illegal conducts on the Platform; - Monitor and mitigate security risks and technical failures, protect your account and system security, and improve the overall security and reliability of our services.
We process your information to comply with legal and regulatory obligations, including responding to litigation, investigations and claims within and outside your jurisdiction, as well as handling mergers, acquisitions, asset sales, corporate restructuring, bankruptcy, liquidation and other similar corporate transactions.
- Optimize and iterate our algorithms and core technologies; - Analyze Platform usage statistics to improve and upgrade our products and services.
To provide content and services that better match your preferences, we may use automated decision-making technologies (including algorithm analysis and user profiling) to analyze your in-platform behaviors (such as usage history, saved content, search records and interactions) and recommend personalized content.
Such automated processing is solely for user experience optimization and will not produce any legal or material adverse effects on you.
You may enable or disable the personalized recommendation function at any time via the corresponding switch in the application settings. After disabling personalized recommendations, we will no longer push tailored content based on your usage behaviors. You may also contact us through the channels specified in this Policy to request manual review or further information.
We will not share your personal information with third parties except as explicitly stated in this Privacy Policy. We may share your personal information in the following circumstances:
We may disclose your information to third parties with your explicit consent or pursuant to your instructions. For example, if you choose to share platform content on social media, we will disclose necessary information to the corresponding social platform in accordance with your settings.
You acknowledge and agree that part of our services are provided jointly with our business partners. We may share your necessary personal information with the following partners to deliver the services stipulated in this Policy:
Social platforms. If you register and use our Platform via social media accounts, we may share certain information (including your nickname and avatar) with the corresponding social platforms.
Service providers. We engage third-party companies to provide services including [data analysis, IT technical support, email delivery, customer service, SMS verification and identity authentication, fraud detection and security services]. If you use SMS verification for account registration or login, we may share your mobile phone number with our designated SMS service providers solely for sending verification codes. All service providers are only authorized to process your data for the purposes specified in this Policy and are required to strictly protect your information security.
Advertising partners. We may share [the list of applications installed on your device] with advertising partners for targeted marketing purposes.
Third-party SDK providers. Storyflick may integrate third-party SDKs for advertising, data analysis, message push and customer service functions. Third parties will collect and process relevant information in accordance with their independent privacy policies. We conduct compliance reviews on all third-party service providers to protect your information security, and you are advised to review the relevant third-party privacy terms.
In the event of merger, financing, acquisition, restructuring, spin-off, bankruptcy, asset transfer or other similar commercial transactions, we may transfer your personal information to the relevant entity. We will notify you of such changes and require the new data controller to fully abide by this Privacy Policy.
We may disclose your personal information to law enforcement agencies, government regulators, courts and other public authorities to fulfill our legal obligations in response to legal or regulatory requirements.
We may also disclose your personal information for the following legitimate purposes:
- Comply with applicable legal obligations, procedures and requirements; - Enforce our Terms of Service and other agreements, policies and rules, including investigating potential violations; - Exercise, establish and defend legal rights; - Detect, prevent and resolve security risks, fraud and technical failures; - Protect the legitimate rights, property and safety of us, our users, third parties and the public within the scope permitted by law.
Currently, the servers storing your personal information related to Storyflick are located in [ ]. You acknowledge and agree that we may transmit and store your personal information on the aforementioned servers in compliance with applicable laws and regulations. Despite potential differences in data protection standards between the server location and your jurisdiction, we will adopt strict protection measures to safeguard your personal information and prevent data leakage.
As stipulated in this Policy, we may share your personal information with third parties located outside [ ]. We will not conduct cross-border data transfers until all applicable legal requirements for cross-border transmission are met.
We retain your personal information until your account is terminated, or for as long as necessary to fulfill the purposes for which the information is collected. We may also retain your information to comply with legal obligations, enforce agreements and resolve disputes.
The specific retention period varies based on [information type, processing purpose and statutory mandatory retention requirements].
Upon the expiration of the retention period, we will delete or anonymize your personal information, unless otherwise required by applicable laws and regulations.
If you wish to cancel your account or request us to stop processing your information, please contact us via the channels specified in this Policy.
We adopt appropriate technical and administrative measures including encryption, data desensitization and access control to protect your personal information. Despite our best efforts to secure your data, no electronic transmission or storage system can guarantee absolute security. Therefore, we cannot warrant the absolute security of your personal information. If you do not accept such inherent risks, please stop using our services.
We adopt encrypted transmission, secure storage, multi-factor authentication and other technical means to prevent unauthorized access, disclosure, tampering and loss of personal information.
We have established internal information security management systems, strictly control employee data access permissions, and conduct regular security training to fully protect your personal information security.
You are entitled to all rights granted by applicable data protection laws, including but not limited to the following:
- The right to access your personal information; - The right to correct inaccurate personal information; - The right to delete your personal information; - The right to withdraw consent; - The right to unsubscribe from notifications and marketing communications; - The right to disable personalized content; - The right to obtain a copy of your personal data; - The right to restrict or object to data processing.
You may contact us via the designated channels to exercise the above rights or resolve relevant issues. We will verify your identity and respond to your request within the time limit stipulated by applicable laws. You may appeal against our decision on your request in accordance with our notification instructions. You may also enjoy additional rights in accordance with the local laws of your jurisdiction as specified in the Supplemental Terms.
You may exercise part of your rights directly on the Platform:
- View personal information: You may check your [user ID, nickname, avatar] via the \"Profile\" page in the application; - View usage data: You may access your saved content in \"My List\", browsing history via \"Profile - Usage History\", and transaction, reward and consumption records via \"Profile - Wallet\"; - Copy personal information: You may copy your [user ID] on the profile page; - Delete usage records: You may delete browsing records in \"Profile - Usage History\" and clear saved content in \"My List\"; - Delete account: You may delete your account and all associated content via \"Profile - Settings - Account Deletion\"; - Clear cache: You may clear cached data via \"Profile - Settings - Clear Cache\"; - Withdraw consent: You may revoke the permissions you have granted to us (such as camera access) via your device settings.
Storyflick is not intended for users under the age of 13, or the minimum age required by applicable laws in your jurisdiction. We do not actively collect personal information from users below the statutory minimum age. If you are under the minimum applicable age, please do not use our services or submit any personal information to us. If you believe we have collected information from underage users, please contact us immediately. We will promptly delete the relevant data and terminate the corresponding account upon verification.
If you have reached the minimum service age but are not yet an adult under applicable laws, you may use our services only under the supervision and consent of your parents or legal guardians. You shall read this Privacy Policy under guardianship and submit personal information only with guardian approval. You and your guardians hereby accept and agree to this Privacy Policy.
We will process your personal information in compliance with the data protection laws of your jurisdiction. The information sharing activities described in this Policy may involve transferring your personal information to affiliated entities or third parties outside your jurisdiction, for the purposes specified herein. The data protection laws of overseas jurisdictions may differ from those of your residence. We will adopt sufficient compliance measures such as standard contractual clauses to ensure adequate protection of your transferred personal information.
We may revise and update this Privacy Policy from time to time to adapt to legal adjustments, technological developments and business changes. We will update the \"Last Updated\" date at the top of this Policy upon revision. For material changes that affect your privacy rights, we will notify you in advance through platform announcements, push notifications, pop-up windows, emails and other reasonable means. Where user consent is required by applicable laws, we will obtain your consent before the revised Policy takes effect. We recommend that you review this Policy regularly to stay informed of the latest terms.
If you have any questions, comments, complaints, requests or suggestions regarding this Privacy Policy or privacy-related matters, you may contact us through the following channels:
- Submit feedback via \"My Page - Contact Us\" in the application; - Official email: support@kimo-culture.com
You may consult privacy-related issues, exercise personal data rights or submit complaints through the above channels. Please refer to the \"Jurisdiction-Specific Provisions\" for local representative contact information (if applicable). Our Data Protection Officer can respond to your privacy inquiries via the official email above.
We will verify your identity and respond to your request within the statutory period after receipt. We will process your request as soon as possible. This does not affect your right to file a complaint with local data protection authorities.
This Privacy Policy is originally written in Chinese and may be translated into other languages. In the event of any inconsistency, conflict or ambiguity between the Chinese original version and translated versions, the Chinese original version shall prevail.
The formulation, validity, implementation and interpretation of this Privacy Policy shall be governed by the laws of Hong Kong, excluding conflict of law rules. All disputes arising therefrom shall be resolved in accordance with our Terms of Service.
If any jurisdiction-specific supplemental terms conflict with other provisions of this Privacy Policy, the supplemental terms applicable to your jurisdiction shall prevail.
This section applies exclusively to residents of California, United States, who are protected by the California Consumer Privacy Act of 2018 (CCPA).
In the past 12 months, we have collected and disclosed your personal information in accordance with the \"Information We Collect\" and \"How We Share Your Information\" sections, for the purposes specified in the \"How We Use Your Information\" section. We do not use or disclose your sensitive personal information beyond the scope permitted by the CCPA.
CCPA Personal Information Categories and Sources:
- Identifiers (email, account name): Information provided by you and third-party sources; - Commercial information (transaction, consumption and reward records): Automatically collected information; - Internet activity information (browsing, click and search records): Automatically collected information; - Audio and visual interactive information: Information provided by you; - Sensitive personal information (login credentials): Third-party sourced information; - User profiling: Inferred and generated based on collected data.
We do not knowingly collect personal information from users under the age of 16.
Under the CCPA and CPRA, \"sale\" refers to the disclosure of personal information for valuable consideration, and \"sharing\" refers to the disclosure of personal information for cross-context behavioral advertising. We do not sell your personal information. We may share device identifiers and browsing data with advertising partners for targeted advertising purposes. You may opt out of targeted advertising in your application settings. We do not sell or share personal information of users under the age of 16.
- Right to Know: Request details of the categories, sources, purposes and recipients of your collected personal information; - Right to Delete: Request deletion of your personal information, subject to statutory exceptions; - Right to Correct: Request correction of inaccurate personal information; - Right to Opt Out: Opt out of data sharing for targeted advertising; - Right to Limit Use: Restrict the use and disclosure of your sensitive personal information; - Right to Non-Discrimination: You will not be discriminated against for exercising your privacy rights.
You may exercise the above rights via our designated contact channels. You may submit up to two Right to Know requests within any 12-month period. We will respond to your valid request within 45 days, with a maximum extension of 90 days where necessary. We will verify your identity before processing requests. We may charge a reasonable fee for repetitive and unfounded requests.
This section applies to residents of the European Economic Area (EEA), the United Kingdom and Switzerland. In case of any conflict with the main body of this Privacy Policy, this section shall prevail.
Data Controller: KIMO CULTURE CO., LIMITED Address: UNIT 18, 8/F, PETER LEUNG INDUSTRIAL BUILDING, 103 WAI YIP STREET, KWUN TONG, KOWLOON, HONG KONG Email: support@kimo-culture.com
We process your personal information only based on the following legitimate legal grounds:
1. Your explicit consent; 2. Performance of the service contract with you; 3. Our legitimate interests (including service optimization, marketing, security risk control and compliant operation) that do not override your fundamental rights and interests; 4. Compliance with statutory legal obligations.
- Right of Access: Obtain a copy of your personal data; - Right of Rectification: Correct inaccurate or incomplete personal data; - Right to Withdraw Consent: Withdraw consent at any time without affecting the lawfulness of prior processing; - Right of Erasure: Request deletion of your personal data under statutory circumstances; - Right of Restriction of Processing: Restrict data processing under statutory circumstances; - Right to Data Portability: Export your personal data in a structured, machine-readable format; - Right to Object: Object to data processing for direct marketing or based on legitimate interests; - Right to Complaint: File a complaint with the local data protection authority.
You may exercise the above rights via our designated contact channels. We may charge a reasonable fee for excessive and repetitive requests without legitimate grounds.